Browsing by Author "Hwang, Jiann-Ming"
Now showing 1 - 2 of 2
- Results Per Page
- Sort Options
Item type:Item, A study on information wrapper protection profile(2007) ;Farn, Kwo-Jean ;Lin, Shu-Kuo ;Hwang, Jiann-Ming ;資訊管理與財務金融系 註:原資管所+財金所Department of Information Management and FinanceHow to help the end-users to identify and analyze the attacks in cyberspace has become extremely important to the information security task. Based on the standard of the Information Security Audit and Alarms Framework published by ISO, in this paper we intend to investigate the security functional and security assurance requirements of the so-called Information Wrapper. Besides, in this paper we also propose a draft Protection Profile (PP) of Information Wrapper. The draft has been registered in the Chinese National Laboratory Accreditation (CNLA) as the security specification of relevant products and/or systems.Item type:Item, Study on applying ISO/DIS 27799 to medical industry's ISMS(2007) ;Farn, Kwo-Jean ;Hwang, Jiann-Ming ;Lin, Shu-Kuo ;資訊管理與財務金融系 註:原資管所+財金所Department of Information Management and FinanceAt present, as medical care sites use more and more IT system, information systems have come to play an important role in the business operation of medical organizations. It is an important goal for management at medical organization in Taiwan to keep the security of medical informatics. HIPAA had been run about ten years in USA, thought its efficiency has still remained to be seen, HIPAA has become the benchmark of the information governance in the information security of medical industry. The Department of Health of Taiwan had adapted from HIPAA and issued the HISPP/GD that included 9 principles and 12 articles altogether. This text will probe into the ISO/DIS 27799, the feasibility of applying it to the management of domestic medical organization and the corresponding detail of ISMS. By this way, we hope that Taiwan's medical organization can build a medical information system and manageable environment that according with the security requirements of confidentiality, integrality and availability.